FMC intrusion events tcp connection

[h.dam]

Hello,

I'm working on Analysis Intrusion Events on FMC. 

I notice that a message "Internal_Event_Session_Add" is always there which shows TCP connection detected with many many counts.

After checking my IPS Policy, it said this rule is disabled. I don't understand why I still get this message.

I'd like to delete this message because it is a false alert. 

Could someone show me how to do? 

Thanks.

[Mohammed al Baqari]

You can delete it in FMC in by selecting it from IPS Analysis and hit
delete in the bottem

[h.dam]

I have already tried this. The message is always there, it only resets the counter.

Regards.